Oracle still auditng events after NOAUDIT
We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail
parameter is set to DB.
So we wipe everything that is being auditing out with NOAUDIT commands, run the audit commands of our bare minimum, and then see how many entries are created come the next day. It's the same rate with the same ratio of specific kinds of entries (ie. hundreds of thousands of successful select statements). In this case we audited select table whenever not successful to start out, so the successful selects should = 0.